Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8c/7de2df-10db-4bbe-9052-5fabd6dc5f93/1/8NMjrUj1pFu8qeh5iD-ukxS1jp0.mft
File: 8NMjrUj1pFu8qeh5iD-ukxS1jp0.mft (raw, json)
Hash identifier: s8JHdJW/KyXo/sr3yGbC+z2sY7UeQYoNmRArcWZDXmI=
Subject key identifier: EF:08:55:94:D4:E7:5E:40:DE:42:EC:31:3F:06:CC:76:0B:07:06:0C
Authority key identifier: F0:D3:23:AD:48:F5:A4:5B:BC:A9:E8:79:88:3F:AE:93:14:B5:8E:9D
Certificate issuer: /CN=f0d323ad48f5a45bbca9e879883fae9314b58e9d
Certificate serial: 0199FCFD99ABA2695A0CD238BAC9127733EB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8NMjrUj1pFu8qeh5iD-ukxS1jp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8c/7de2df-10db-4bbe-9052-5fabd6dc5f93/1/8NMjrUj1pFu8qeh5iD-ukxS1jp0.mft
Manifest number: 02A0
Signing time: Sun 19 Oct 2025 15:01:42 +0000
Manifest this update: Sun 19 Oct 2025 15:01:42 +0000
Manifest next update: Mon 20 Oct 2025 15:01:42 +0000
Files and hashes: 1: 8NMjrUj1pFu8qeh5iD-ukxS1jp0.crl (hash: OBg+PC+WVGCB/j0Y3dHA42l+rmm6W6tLYzPQYfL6gvs=)
2: vAn1hXUKdqSNmKMN5EpP_udaSvg.roa (hash: KSkyWrBwmDHasLhukMvu07oX0o0MiqrtLLWwQJGc7Qw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8c/7de2df-10db-4bbe-9052-5fabd6dc5f93/1/8NMjrUj1pFu8qeh5iD-ukxS1jp0.crl
rsync://rpki.ripe.net/repository/DEFAULT/8c/7de2df-10db-4bbe-9052-5fabd6dc5f93/1/8NMjrUj1pFu8qeh5iD-ukxS1jp0.mft
rsync://rpki.ripe.net/repository/DEFAULT/8NMjrUj1pFu8qeh5iD-ukxS1jp0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 15:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:fd:99:ab:a2:69:5a:0c:d2:38:ba:c9:12:77:33:eb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f0d323ad48f5a45bbca9e879883fae9314b58e9d
Validity
Not Before: Oct 19 15:01:42 2025 GMT
Not After : Oct 20 15:01:42 2025 GMT
Subject: CN=ef085594d4e75e40de42ec313f06cc760b07060c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:03:6b:cd:cf:56:ef:7c:78:9e:28:70:22:01:
4e:9c:9e:cf:e6:82:c7:8a:52:e6:6b:31:fe:57:f6:
a8:c9:d1:0b:55:68:dd:fb:50:13:29:fa:f0:33:05:
f2:59:d4:11:2a:d7:3b:17:27:94:ef:02:84:7d:93:
31:19:16:81:25:ea:30:02:6d:16:16:43:d9:38:20:
cb:4d:f4:32:4a:8e:1a:91:aa:6f:8a:22:ac:fc:04:
53:42:1e:dc:81:a9:ad:7c:9b:07:4d:03:7a:b8:2e:
01:05:69:d8:c6:58:09:1d:ac:3b:90:77:b0:c7:2b:
90:6d:88:20:88:fc:00:0c:7d:00:d0:9f:ad:2e:cc:
e9:b0:f0:f9:74:dc:55:fb:02:32:ad:f4:92:4f:90:
17:2f:d1:90:be:39:43:11:ff:a6:8b:3a:fa:31:de:
e9:60:e5:20:b5:64:61:ec:d9:a4:13:9a:ad:8f:fa:
79:a8:4f:cc:17:bf:c3:b1:2f:de:d8:bb:58:fa:11:
ea:a3:25:b9:2c:c0:02:9c:0a:c4:67:62:3b:9a:3a:
fd:c4:da:45:12:5a:6f:1e:37:a5:a2:ff:96:a5:44:
b3:be:32:d9:25:3c:9b:6f:d2:f0:b9:cf:ec:9c:92:
9c:38:a3:bf:91:fa:0e:d7:77:da:db:a2:8f:35:5a:
0c:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:08:55:94:D4:E7:5E:40:DE:42:EC:31:3F:06:CC:76:0B:07:06:0C
X509v3 Authority Key Identifier:
keyid:F0:D3:23:AD:48:F5:A4:5B:BC:A9:E8:79:88:3F:AE:93:14:B5:8E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8NMjrUj1pFu8qeh5iD-ukxS1jp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/7de2df-10db-4bbe-9052-5fabd6dc5f93/1/8NMjrUj1pFu8qeh5iD-ukxS1jp0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/7de2df-10db-4bbe-9052-5fabd6dc5f93/1/8NMjrUj1pFu8qeh5iD-ukxS1jp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
84:3d:13:78:0d:b8:c0:d3:4a:55:d5:27:0a:9e:56:59:ad:72:
45:5f:90:f6:aa:b0:07:db:73:5e:fd:fe:4b:63:11:21:a7:3b:
ae:35:72:82:a4:fd:3d:95:0e:43:de:98:40:80:4b:c8:8b:71:
cd:a4:23:f3:f6:0f:73:51:d5:e7:5e:96:74:da:5c:df:f1:5d:
e3:54:86:fa:39:fa:67:14:0e:8d:35:01:ae:26:60:3d:d5:52:
f4:89:37:02:85:ac:9b:ed:d7:88:9b:53:11:fc:39:9f:96:15:
32:24:30:fd:38:ec:9e:63:a5:ed:3b:89:f7:fd:e9:12:db:5c:
7b:30:77:39:73:57:d4:ed:3f:05:2d:d9:76:7b:22:a7:6b:0d:
2e:6a:52:fa:e7:52:04:d4:05:d1:77:77:53:08:d0:2b:f3:d8:
2e:6f:d4:db:79:40:4b:56:b3:30:57:4d:05:37:18:64:de:ab:
87:0a:b9:75:7b:93:53:b7:a5:60:5d:25:15:98:04:a0:2f:6c:
e4:96:35:88:a4:b8:34:ef:c0:10:ce:d8:36:40:9c:8f:b9:d2:
f0:88:34:65:7f:39:42:12:7f:c5:38:ed:42:f4:4c:a1:fc:95:
07:5a:38:47:83:64:54:be:45:c0:c8:f1:a2:fb:86:37:18:fe:
b6:ed:f4:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 23:17:42 2025 by rpki-client